Functional Networking for Millions of Docker Desktops (Experience Report)
summary
A decade-long engineering saga that ships OCaml unikernels inside Docker Desktop, running Linux as a callable library via a library virtual machine monitor and user-space hypervisor hooks. The team builds a tiny immutable Linux Kit, a custom OCaml storage layer and a reverse network stack (MirageOS/VPNKit) that rewrites Ethernet frames into host sockets, fixes enterprise firewall surprises, and scales to hundreds of millions of downloads and billions of images while moving from Lwt to effect-based direct-style IO.
AI-written summary · about
chapters (7)
- 0:00Docker overview and evolution
- 3:13Linux as a function call
- 7:06Docker Desktop architecture
- 13:26Hidden Linux network problem
- 16:35Functional networking in Docker
- 19:03Performance with direct IO
- 20:28Summary and future
related talks
46mOCaml for Fun & Profit: An Experience Report
36mYou Might Just be a Functional Programmer Now
20mFour Years of Embedded Haskell in Critical Real-Time Systems: Lessons and Insights
32mEffective Programming in OCaml
32mFunctional Programming for (Dev)Operations and Infrastructure
51mBuilding Distributed Applications in OCaml
31mBuilding a Sustainable CodeBase with FP
26mAn Invitation to OCaml